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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1. (currently amended) A method of operating a trusted 
computing system comprising a plurality of computing devices on 
a network , the method comprisingj_ 

an assessor computing device receiving via the network a 
report from, and pertaining to the trustworthiness of, a first 
computing device [[,]]]_ an< d 

the assessor computing device updating via the network the 
trust policy of a second computing device in accordance with the 
report . 

2. (currently amended) A method according to claim 1, wherein 
the assessor computing device updates via the network the trust 
policies of multiple computing devices in accordance with the 
report . 

3. (currently amended) A method according to claim 1, wherein 
the assessor computing device updates via the network policies 
by assessing the trustworthiness of the first computing device 
on the basis of information about the first computing device in 
the report. 
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4. (currently amended) A method according to claim 1, wherein 
the assessor computing device updates via the network policies 
on the basis of an assessment of the trustworthiness of the 
first computing device contained in the report. 



5. (currently amended) A method according to claim 1, wherein 
the assessor computing device requests via the network the first 
computing device to make the report. 



6. (original) A method according to claim 1, wherein the 

first computing device is caused to report by being started-up 
or reset, or by an undesirable event occurring. 



7. (original) A method according to claim 1, wherein the 

first computing device is caused to report periodically. 



8. (currently amended) A method according to claim 1 in which 
the second computing device authenticates the trust policy 
update issued by the assessor computing device before accepting 
it. 



9. (currently amended) A method of operating a trusted 
computing system comprising a plurality of computing devices on 
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a network, in which a first computing device has a trusted 
component which issues a report pertaining to the 
trustworthiness of the first computing device wherein a trust 
policy controller receives said report via the network from the 
trusted component and updates via the network the trust policy 
of a second computing device in accordance with said report. 

10. (currently amended) A method of operating a trusted 
computing system comprising multiple computing devices on a 
network wherein a trust policy controller determines the trust 
policy for each of said computing devices in accordance with the 
trustworthiness of other of said multiple computing devices as 
determined from reports received by the controller via the 
network pertaining to the trustworthiness of each computing 
device . 

11. (currently amended) An assessor computing device for 
controlling a trusted computing system comprising multiple 
computing devices on a network , the assessor comprising a 
receiver for receiving via the network a report from, and 
pertaining to the trustworthiness of, a first computing device, 
an updater for updating the trust policy of a second computing 
device in accordance with the report, and a transmitter for 
transmitting the updated policy to the second computing device 
via the network. 
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12. (currently amended) An assessor computing device according 
to claim 11, wherein the updater is arranged to update the trust 
policies of multiple computing devices in accordance with the 
report and the transmitter is arranged to transmit the updated 
policies to the multiple computing devices via the network , 

13. (currently amended) An assessor computing device according 
to claim 11, wherein the updater updates policies by assessing 
the trustworthiness of the first computing device on the basis 
of information about the first computing device in the report. 

14. (currently amended) An assessor computing device according 
to claim 11, wherein the updater updates policies on the basis 
of an assessment of the trustworthiness of the first computing 
device contained in the report. 

15. (currently amended) An assessor computing device according 
to claim 11 further comprising a requestor, for requesting the 
report from the first computing device. 

16. (currently amended) A system^ comprisingj_ 

an assessor computing device for controlling a trusted 
computing system comprising multiple computing devices on a 
network , the assessor comprising 

a receiver for receiving via the network a report 
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from, and pertaining to the trustworthiness of, a first 
computing device, 

an updater for updating the trust policy of a second 
computing device in accordance with the report, and 

a transmitter for transmitting the updated policy to 
the second computing device, and 

the system further comprising first and second computing 
devices, wherein at least the first computing device comprises a 
reporter for sending via the network a trustworthiness report to 
the assessor computing device and at least the second computing 
device comprises a memory maintaining a trust policy such that 
the trust policy is modifiable by the transmitter. 

17. (original) A system as claimed in claim 16 in which the 
reporter comprises a trusted component associated with the first 
computing device. 

18. (currently amended) A system^ comprisingj_ 

multiple computing devices on a network, and 

a trust policy controller which serves to determine the 
trust policy of said computing devices; 

each of said computing devices having associated with it a 
trust policy memory to store a trust policy for that computing 
device, and a trusted component which issues a report pertaining 
to the trustworthiness of that computing device; wherein 
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the controller receives via the network reports from the trust 
components and updates via the network the trust policy in the 
trust policy memory of each computing device in accordance with 
the trustworthiness of other of said multiple computing devices 
as determined from said reports. 



